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(54) Location dependant service access 

(57) Access to a distributed computer system 17, 
1 71 , 1 72 is achieved from a mobile terminal 1 1 . The lo- 
cation or other characteristics of the terminal 11 are 
identified and communicated to a co-operating access 
control server 13. A store 15 holds details of location- 
based servers 16, 161 , 162, which in turn have details 
of local computer equipment 17, 171 , 1 72. The access 
control server 13 identifies a suitable location-based 



server 16 and provides access to the location based 
server so that the terminal 11 can identify the individual 
items of computer equipment 17, 171, 172 available. 
The invention allows a mobile terminal 11 to make use 
of location-based facilities 17 by forming a connection 
with the local distributed computer system 16, 17, 171, 
172. Examples include access from the mobile unit to 
fixed equipment such as printers, or location based 
services such as airport check-in services. 
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Description 



[0001] This invention relates to the control of access 
to elements of a distributed computer system 
[0002] Distributed computing systems provide a 
group of computer apparatus, (for example 1 7 1 71 1 72 
•n Figure 1) such as laptop terminals, printers' databas- 
es ; etc when can interact with each other as required 
rather than being permanentlyconnected, either directly 
or through a common "server". They typically interact 
hrough a look-up server (16) which stores the identities 
(network addresses) of the elements forming the sys- 
tem^ When it is connected to the network, the apparatus 
sends out a multicast call to "discover" the nearest 
ookup server - that is, any serving local area networks 
(LANs) to which the apparatus is connected, and causes 
itself to be registered with any lookup server that re- 
sponds. 

[0003] Advantages of such systems include the ability 
to interoperate apparatus with the minimum of access 
control protocols for the user to perform, and their resil- 
ience to component failure, because even if parts of the 
network, or individual terminals or services fail other 
parts continue to operate. Initial disadvantages of dis- 
tributed computing architectures were network re- 
sponse t.mes, particularly rf interoperation outside a lo- 
cal network was required, and complexity of develop- 
ment, though this has been addressed by more recent 
standard .menaces such as the one developed by Sun 
Microsystems known as "JINI", which uses the JAVA 
programming language. 

[0004] For such systems to operate it is necessary to 
define in advance the apparatus which are to co-oper- 
ate. In particular, a terminal (10) forming part of the sys- 
tem must be provided with the means to access the look 
up server, and must therefore be recognisable to it 
However, there are circumstances when it would be 
convenient for a given apparatus to be made a tempo- 
rary member of such a group. In particular, a user of a 
mobile terminal (such as a Personal Digital Assistant- a 
portable computer terminal with communications capa- 
bility) may require use of computer entities specific to 
his current location. 

[0005] According to the present invention there is pro- 
vided a method of providing access to a distributed com- 
puter system from a terminal, comprising the steps of 
identifying one or more characteristics of the terminal 
selecting a distributed computer system having the ter- 
minal characteristics so identified, and providing access 
to the server of the distributed computer system so iden- 
tified. This process is preferably performed by the ac- 
cess control server with which the terminal communi- 
cates the access control server being part of the dis- 
tributed system and therefore capable of connection to 
the selected apparatus. In a preferred embodiment the 
characteristic is the location of the terminal. The location 
may be identified by an automatic position-finding proc- 
ess. Alternatively location may be identified by user en- 



try of details by a keypad. Access may be provided by 
retrieval from a store of an address for a distributed com- 
puter system, or a selected element thereof, having the 
required characteristic. 

5 [0006] Anembodimentoftheinventionwillnowbede- 
senbed, with reference to the drawings, in which 

Figure 1 illustrates the general arrangement of the 
components participating in the service 
10 Figure 2 illustrates the service identification phase 
Figure 3 illustrates the operation of the service se- 
lection and interaction phase 



[0007] The embodiment to be described in detail is a 
printer service which allows a user access to identify a 
pr.nt.ng apparatus available in his vicinity, and then 
make use of it through his PDA. However, as will be de- 
senbed, many other services may be provided In the 
same way. 

20 [0008] The embodiment illustrated in Figure 1 allows 

?PDA% T 8 St8ndard Pere ° na ' Dl '9 ital Assista "» 
( njA 11 - essentially a laptop computer with access 

to a cellular communications network 1 8 - to access the 
functionality of a local service 1 7 identified as appropri- 
ate to a location specified by the user himself, or deter- 
mined automatically by his PDA 11. The interface may 
be ,n any suitable protocol, the one illustrated beingcon- 
figured for HTTP Protocol. 

[0009] The user's mobile unit 1 1 has a means 12 for 
determining its geographical location. This may take 
one of many forms, as will be described later. The mobile 
unit 1 1 , s in communication through the communications 
network 18 with an access control server 13, through 
which it may access a network of computers, typically 

if! 0 "! ^ W '" thin 3 COm P an y such a* the "Intranet" 
14 (and also the internet). The access control server 13 
also has access to a database 15 which stores access 
address data for a number of location-based look-uo 
servers 1 6, 1 61 , 1 62 etc, in conjunction wiith geograph 
« -cal locat.on data for each one. Each such location- 
based server (1 6 for example) stores details such as the 
identities, interface requirements and current status (in 
service, busy, not available etc) of services 17 171 172 
available at its respective location, and the address by 
which each such device or service may be accessed 
through the distributed computer system 14. In the "Jl- 
Nl system previously referred to, a service (17 
171,172), when connected to the network, sends out 
30 TIT' Ca " S t0 " discover " ^ n^rest lookup server 
able rc9is,ers itself on the ^rver 1 6 as being avail- 

[001 0] The access control server 1 3 is able to con nect 
to the lookup server 16 of a local LAN to find out the 
printer services 1 7, 1 71 , 1 72 that have been registered 
with that lookup server 1 6. The access control server 1 3 
does not have to be part of that LAN itself, but does form 
part of the distributed system and runs servlets which 
communicate with the other members 16, 17 171 172 
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of the distributed system. The access control server 13 
does not necessarily need to be recognised by the other 
parts of the system. It acts as a client jn an agent based 
system: the access control server 1 3 needs to be aware 
of and control the services 1 7, 1 71 , 1 72, and the lookup 5 
server 16, and in some applications (in particular the 
look up server 1 6) to retrieve data from them. However, 
the access control server 1 3 does not itself need to be 
accessed from the services 17, 1 71 , 1 72 or the lookup 
server 16 except in response to a specific request from 
the access control server 13. In contrast to the prior art 
arrangement, in which each PDA 10 must be a pre-ex- 
isting member of the distributed system, with a suitable 
access means to the look-up server, in the present in- 
vention only the access control server 13 needs to have 
this capability. 

[0011] The process of accessing a local service 17 
from a mobile device 11 involves the user performing 
three principal steps: Identification of Location, Selec- 
tion of Local Services, and Interaction with Local Serv- 
ices 

[001 2] Identification of the location of the user 1 1 may 
be automatic. The satellite-based Global Positioning 
System could be used, but is unreliable inside buildings, 
and requires the user terminal to have a GPS receiver. 
[001 3] A position-finding system based on the cellular 
telephone network such as that disclosed in the present 
applicant company's International Patent Specification 
WO96/35306, may be used. This measures the position 
of the mobile unit relative to the network of iocal radio 
base stations, by measuring the difference in arrival 
times of signals transmitted synchronously by the base 
stations. In this arrangement the position-finding proc- 
ess may be carried out by the network, and in particular 
by the access control server 13 

[0014] The "ad hoc" piconet system being developed 
by a consortium led by Ericsson and known as "Blue- 
tooth" is another possibility. This system allows devices 
equipped with a suitable "Bluetooth" transceiver to es- 
tablish localised networks of co-operating devices. A 
mobile user terminal equipped with such a transceiver 
would automatically become part of any localised net- 
work within whose range it moves. One of the devices 
at a given location may act as a beacon to identify its 
location, and consequently the approximate location of 
other devices in communication with it: this may be an 
ancillary function of a device provided for another pri- 
mary purpose, or it may be provided by a dedicated de- 
vice. The latter arrangement is preferred since it avoids 
the possibility of the host device being removed for re- 
pair or replacement. 

[0015] Alternatively, the user may select the location 
from a form-based Web page, using his own knowledge 
as to his wherabouts, and enter his position manually. 
[0016] Once the user's current location has been 
identified, by any of the means described above, the 
services required are identified. This again may be done 
by manual input by the user, or may be done automati- 



cally as a result of previous user activity. In manual 
mode the user may select a function, for example "Find 
Printers".. In each case the access control server will re- 
trieve from the local server a list of local printers nearest 
the user's location. The user may now select a printer 
to use. Although in the example data is transferred only 
in one direction; from user to printer, the invention may 
be used to transfer data in either direction for example 
instead of printing a file from a PDA using a local printer, 
the invention can be used to copy or display locally 
stored files on the user terminal. 
[0017] In detail, the service identification and interac- 
tion processes operate as follows. 
[0018] The first part of the process concerns the initial 
query - i.e given a location, (specified by one of the 
means described above) the services available are to 
be identified. 

[0019] This query is passed to the access control 
server 13 using standard HTTP CGI (Common Gateway 
Interface) technology. In this embodiement the access 
control server 13 runs Java Server Pages technology in 
the form of a "servlet" 1 9 (a standard Sun Microsystems 
web server-side technology) to process the queries and 
interface with JINL The steps involved in this process 
are shown in Figure 2. Firstly the user transmits a "Re- 
quest for Local Services" (step 21 ) to its access control 
server 13. The servlet 19 in the access control server 
13 sends a query to the. database 15 for the nearest 
lookup server at the specified location (step 22). The da- 
tabase 15 returns a list of lookup servers 16, 161 , 162 
at the requested location (step 23). The servlet 1 9 then 
contacts the lookup server 16 identified as being the 
most appropriate, to obtain a list of local services 17, 
171 , 172 (step 24). This list may be stored in the data- 
base 15 to implement a form of caching (step 25) or it 
may be incorporated in the HTML message as a "cook- 
ie", that is a small programme for operation of the user 
terminal. The list is transmitted to the user terminal 11 
as a HTML (hypertext markup language) message (step 
26). 

[0020] The next part of the process concerns identifi- 
cation of the "interface" between the user terminal 11 
and the service 17 to be used, which requires definition 
to allow interoperability. The interface definition files 
may be stored in a repository associated with each serv- 
er 1 6, 161. 1 62, which the user terminal 1 1 can access 
to retrieve the interface data it requires. They may in- 
stead be retrieved from the look up server and stored in 
the database 15 with the list itself. In a simpler system, 
services compatible with the system may be arranged 
to all have a standard interface, or set of functions, mak- 
ing these steps unnecessary. For example all printer 
services would implement the following interfaces, us- 
ing the same definitions and operating protocols: 

landscape/portrait selection 
black and white/colour selection 
number of copies. 
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[0021] The next part of the process, shown in Figure 
3, is the local service interaction phase. The user termi- 
nal 11 transmits an instruction to the access control 
server 1 3 to call the required service 1 7 from within the 
servlet 19. The necessary interface parameters are also 5 
transmitted, either automatically or by the user in re- 
sponse to a prompt. Firstly a request is made to the serv- 
let 1 9 for a specific Local Service 1 7, selected from the 
list (step 31), including any parameters required. These 
are checked by the servlet 1 9 (step 32), and if necessary w 
prompts are transmitted to the user for re-entry of the 
data, or entry of further user selections. The address de- 
tails of the requested service 1 7 are next extracted from 
the database 1 5 (step 33) , or run as cookies in the server 
if they have previously been stored there in this form, is 
The requested service unit 1 7 (the printer in the present 
example) is then called with the required parameters 
(step 34), and a job status is returned to the user termi- 
nal 11 (e.g. "print job submitted") (step 35). 
[0022] This arrangement has several useful features. 20 
Firstly, the system is independent of the specific devices 
available, since the interface is handled through the net- 
work. Secure managed access is possible. Different in- 
terfaces can be used, using the service control unit 13 
to provide a standard "look and feel" to the user. 25 
[0023] The invention has several applications beyond 
the simple printer service application outlined above. 
Further examples will now be described, with reference 
to the same figures. 

[0024] A localised select/payment system may be so 
provided, in which a user in a restaurant either logs onto 
a restaurant website 1 7 using his own PDA 1 1 , or is giv- 
en a restaurant PDA already connected to the system. 
The PDA 11 is used to access local information, such 
as the menu (which may include multimedia menu pres- 35 
entation, including ingredients etc), and then call for a 
waiter, or alternatively order the meal using an on-line 
order system. Further dishes/courses etc can be or- 
dered when ready. Finally the user can opt to pay the 
bill automatically via a payment system server 171 40 
(which has a standard interface) connected to the res- 
taurant's EFTPOS (electronic funds transfer at point of 
sale) system. This allows the user to view a multimedia 
menu on a non-obtrusive device. The restaurant chain 
can implementthe same secure system at each branch, 45 
but customise local branch menus, prices and so on. 
Other services, such as a printer service 17 to print the 
bill or make a copy of the menu, or a taxi ordering service 
172, can be readily added. Other select/payment sys- 
tems can be envisioned for other scenarios, such as so 
train ticket ordering. 

[0025] Another potential application is for localised 
secure service access. A subscriber to an airport's sys- 
tem, on entering the airport, may connect his handsetl 1 
over the network 1 8 to the airport's system 1 6, and se- ss 
lect a check-in service 1 71 . This displays a list of airlines 
that have subscribed to the scheme, and the local flights 
departures. The user selects the airline and flight, enters 



a pre-defined (secure) code, and is automatically 
checked in. The user may be able to select a specific 
seat, and specify in-flight meals, and obtain details for 
luggage check-in. Other services which might be added 
include last-minute ticket finding, and accommodation 
and transport services for arriving passengers, as well 
as multimedia information on the local airport. 
[0026] Another application of the system is as a local- 
ised information service, provided in a specified envi- 
ronment such as a train. From the train's own data net- 
work a user can request information on the journey time, 
buffet car prices and menu. If security controls are used,' 
items could be ordered/purchased. 



Claims 

1 . A method of providing access to a server of a dis- 
tributed computer system from a terminal, compris- 
ing the steps of identifying one or more character- 
istics of the terminal, selecting a distributed compu- 
ter system suitable for operation with a terminal 
having the characteristics so identified, and provid- 
ing access to the distributed computer system so 
identified. 

2. A method according to claim 1 , wherein the terminal 
co-operates with an access control server, the ac- 
cess control server being part of the distributed sys- 
tem and therefore capable of connection to the se- 
lected apparatus. 

3. A method according to claim 1 or claim 2, in which 
the characteristic identified is the location of the ter^ 
minal. 

4. A method according to claim 3, in which the location 
is identified by an automatic position-finding proc- 
ess. 

5. A method according to any preceding claim, in 
which access is provided by retrieval from a store 
of an address for a distributed computer system, or 
a selected element thereof, having the required 
characteristic. 

6. An access control server for enabling access by an 
associated terminal apparatus to a distributed com- 
puter system, the access control server having 
means for communication with at least one or more 
terminals, means for receiving data from the termi- 
nal identifying one or more characteristics of the ter- 
minal, means for selecting a distributed computer 
system suitabel for co-operation with a terminal 
having the characteristics so identified, and means 
for providing access to the distributed computer 
system so identified. 
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7. Apparatus according to claim 6, wherein the access 
control server has means for identifying the location 
of the terminal. 

8. Apparatus according to claim 6 or 7, wherein the 5 
access control server has a storage means for stor- 
ing addresses for distributed computer systems, or 

a selected elements thereof, having given charac- 
teristics, for retreival . 

10 



15 



20 



25 



30 



35 



40 



45 



50 



55 



5 

1170920A1J_> 



EP 1 170 920 A1 




BNSDOCID: <EP 1 170920A1J_ 



EP1 170 920 A1 




00 




a 
+-> 

Q 



OX) 



-co 



BNSDOCID: <EP 1 170920A1J_> 



EP1 170 920 A1 




EP 1 170 920 A1 



European Patent 
Office 



EUROPEAN SEARCH REPORT 



Application Number 

EP 00 30 5716 



DOCUMENTS CONSIDERED TO BE RELEVANT 



Category 



Citation of documont vrfth Indfcation, wtwe appropriate, 
of relev a n t paiwafl BS 



Relevant 
to ciafm 



CLASSIFICATION OF THE 
APPLICATION (InLCI.7) 



US 5 603 054 A (GOLDSTEIN RICHARD J ET 
AL) 11 February 1997 (1997-02-11) 

* column 3, line 41 - column 4, line 62 * 

* column 7, line 26 - column 9, line 47 * 

* column 18, line 29 - line 46 * 

* column 24, line 1 - line 30 * 

* figures 1,2* 

* abstract * 



1-8 



H04L29/06 



TECHNICAL RELOG 

<tn£.CL7) 



H04L 



The present search report has been drawn up for afl claims 



Ptaoe of March 

THE HAGUE 



Date of oompfatkm of the aeorah 

IS January 2001 



Canosa Areste, C 



CATEGORY 1 OF CITED DOCUMENTS 

X : particularly relevant if taken alone 

Y : part) aJ arty relevant V comtfned wtth another 

document of the same category 
A : teoivtofoglOBJ background 
O : nofi - written otsdosuro 
P : imernedUte documetrt 



T : fheory or principle underlying the invention 
E : earlier patent document, but pcbQshed on, or 

after the fling dale 
D : document orteO In trie application 
L : document cited for other reasons 

& : member of the same patent family, corresponding 
document 



BNSDOCID: <EP 1 170920A1_I_> 



EP1 170 920 A1 



4 

) 



ANNEX TO THE EUROPEAN SEARCH REPORT 
ON EUROPEAN PATENT APPLICATION NO. 



EP 00 30 5716 



T*e European Patent Office fat In no way liable for those particulars whtcft are merely given for *e purpose of (rrtormatton. 

15-01-2001 



Patent document 
cfted In search report 



Publication 
date 



US 5603054 



Patent family 
member(s) 



11-02-1997 



Publication 
dale 



US 5555376 A 

US 5717955 A 

US 5611050 A 

US 5544321 A 



10-09-1996 

10- 02-1998 

11- 03-1997 
06-08-1996 



& For 



details about this annex : see Official Journal of the European Patent Office, No 12/82 



10 



BNSDOCID: <EP 1170920A1_I_> 



This Page is Inserted by IFW Indexing and Scanning 
Operations and is not part of the Official Record 

BEST AVAILABLE IMAGES 

Defective images within this document are accurate representations of the original 
documents submitted by the applicant. 

Defects in the images include but are not limited to the items checked: 

□ BLACK BORDERS 

□ IMAGE CUT OFF AT TOP, BOTTOM OR SIDES 

□ FADED TEXT OR DRAWING 

□ BLURRED OR ILLEGIBLE TEXT OR DRAWING 

□ SKEWED/SLANTED IMAGES 

□ COLOR OR BLACK AND WHITE PHOTOGRAPHS 

□ GRAY SCALE DOCUMENTS 

□ LINES OR MARKS ON ORIGINAL DOCUMENT 

t£ REFEREN CE(S) OR EXHIBIT(S) SUBMITTED ARE POOR QUALITY 

□ OTHER: 

IMAGES ARE BEST AVAILABLE COPY. 
As rescanning these documents will not correct the image 
problems checked, please do not report these problems to 
the IFW Image Problem Mailbox. 



BLANK PAGE 



